neon-postgres
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
neonCLI for administrative tasks, including project management, environment variable synchronization (neon env pull), and database diagnostics (neon inspect db). These operations are consistent with the skill's purpose as a database management tool provided by the vendor. - [INDIRECT_PROMPT_INJECTION]: The skill has an inherent indirect prompt injection surface typical for agents processing external data like database schemas, connection strings, and SQL query results.
- Ingestion points: The skill ingests
DATABASE_URLvalues, repository-based project configurations, and SQL schemas provided by the user. - Boundary markers: No specific boundary markers or delimiters are defined to isolate untrusted external content from the skill's core instructions.
- Capability inventory: The skill possesses the ability to execute shell commands via the
neonCLI and perform file system operations (reading and writing.envfiles). - Sanitization: No explicit sanitization or validation logic for user-provided schemas or SQL inputs is described within the skill body, relying on the underlying platform's standard protections.
Audit Metadata